Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/wjRzbhIk11Lp9hyZfQbFKcnOyD8.roa
File: wjRzbhIk11Lp9hyZfQbFKcnOyD8.roa (raw, json)
Hash identifier: T8hdNmkE+pLYi37rFqVA9VDRoAAbsXUbCETvWHmP1dg=
Subject key identifier: C2:34:73:6E:12:24:D7:52:E9:F6:1C:99:7D:06:C5:29:C9:CE:C8:3F
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 018CC2DB095ED31CA72787A857B8CCA8D63A
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/wjRzbhIk11Lp9hyZfQbFKcnOyD8.roa
Signing time: Mon 01 Jan 2024 02:29:43 +0000
ROA not before: Mon 01 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211056
IP address blocks: 45.81.17.0/24 maxlen: 24
45.81.16.0/24 maxlen: 24
45.81.19.0/24 maxlen: 24
45.81.18.0/24 maxlen: 24
185.201.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 05:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:09:5e:d3:1c:a7:27:87:a8:57:b8:cc:a8:d6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Jan 1 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c234736e1224d752e9f61c997d06c529c9cec83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:05:44:49:91:61:24:13:7e:91:0f:e2:51:6d:
fa:1b:51:22:ca:11:d7:f2:b8:36:cf:3d:fa:5f:41:
28:cf:6f:da:7e:4f:ba:b7:e4:9c:d7:f4:b3:5b:c6:
37:df:32:2c:2f:c2:e4:0d:cf:7b:20:09:b9:f7:5d:
49:d8:a5:98:65:d1:8c:dd:15:19:c9:ea:0a:6e:5b:
f2:c8:8e:f7:2c:e0:12:c6:6b:4a:ab:7f:97:aa:aa:
22:0b:16:3a:42:b4:d4:36:00:18:8f:30:83:32:dd:
77:ed:87:6e:88:bc:85:89:c6:24:5e:d1:5e:01:e7:
d8:dd:fd:88:cc:44:45:00:1d:42:74:34:ef:ea:af:
1b:59:a4:e6:74:ca:7f:c3:3e:3e:0a:0b:e2:8f:37:
d7:eb:26:9e:16:5e:3e:3f:04:bb:e5:f6:1f:77:a7:
4c:79:89:bb:b2:1b:63:1e:85:da:02:9a:f1:df:14:
fd:f9:1c:d4:15:d7:5f:6c:82:2d:0b:31:b3:ee:fc:
aa:22:38:a7:e7:7c:c9:2d:cf:65:63:61:ee:e4:3c:
1d:bc:c5:3c:5f:1b:99:a4:bd:f7:d1:61:c6:96:a1:
73:97:20:8b:56:51:90:77:e5:43:3e:f6:09:b6:1c:
5b:d4:51:3b:f2:4f:c3:4f:e0:61:ed:85:ad:11:1f:
1b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:34:73:6E:12:24:D7:52:E9:F6:1C:99:7D:06:C5:29:C9:CE:C8:3F
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/wjRzbhIk11Lp9hyZfQbFKcnOyD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.16.0/22
185.201.49.0/24
Signature Algorithm: sha256WithRSAEncryption
29:74:ac:4d:6b:21:38:fa:6c:9e:e2:42:6f:f1:60:74:b4:c9:
2d:c9:35:07:25:4c:43:fb:98:37:df:33:f3:c0:a4:23:b9:ba:
33:47:61:a2:e7:20:32:88:b5:55:ce:f7:25:6e:99:35:a2:22:
0b:e6:e9:e0:06:39:81:52:b0:e7:d7:26:6e:c8:f2:26:56:e7:
a5:04:20:ca:e1:2c:42:4f:77:bc:9b:da:f8:4a:5e:f3:62:b3:
c0:50:17:54:c3:3a:7d:d3:d4:43:5f:d2:62:d2:61:67:9d:03:
8d:35:34:e6:42:95:3b:42:66:14:d4:76:db:41:8d:06:86:eb:
08:ae:98:12:65:a6:85:90:af:97:f3:83:20:c7:55:62:cd:3b:
94:c8:2a:f6:02:18:85:9a:03:6f:e8:3f:e2:d9:58:83:c8:8b:
13:17:34:7e:c9:85:b3:73:1e:92:30:1e:96:ca:eb:f3:0b:c9:
c3:55:a3:63:51:76:37:65:84:69:ad:79:d9:1e:94:7c:e2:e9:
9d:54:99:8e:d2:23:0a:b7:9d:a2:3a:1d:5b:f1:12:d3:77:71:
85:26:f9:a4:b3:fc:a4:0e:eb:45:b9:7a:69:72:47:63:22:d6:
4f:08:02:d7:28:2a:07:c9:72:7b:c6:28:aa:cf:79:b3:bb:74:
ca:ae:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:42 2024 by rpki-client on console.sobornost.net